Which SAQ should I use?

Q1: Are you a service provider or a merchant?

Service Provider Merchant

Q2: Do you store credit card data electronically?

Yes No

Q3: Do you accept payments via ecommerce?

Yes No

Q4: Is the account data process fully outsourced to a PCI Compliant service provider?

Yes No

Q5: Do you use a third-party service provider to process or store credit card data for your e-commerce transactions?

Yes No

Q6: Is your e-commerce website hosted and maintained by a PCI DSS validated third-party service provider?

Yes No

Q7: Do you accept MOTO (Mail Order/Telephone Order) transactions?

Yes No

Q8: Do you use a third-party service provider to process or store credit card data for your MOTO transactions?

Yes No

Q9: Do you use an imprint machine or a standalone dial-out terminal for your MOTO transactions?

Yes No

Q10: Is the imprint machine or standalone dial-out terminal used for your MOTO transactions connected to the Internet or any other network?

Yes No

Q11: Do you enter credit card data into a computer system or virtual terminal for your MOTO transactions?

Yes No

Q12: Are your MOTO transactions processed using a virtual payment terminal accessed through a web browser?

Yes No

Q13: Do you accept card-present transactions?

Yes No

Q14: Do you use an imprint machine or a standalone dial-out terminal for your card-present transactions?

Yes No

Q15: Is the imprint machine or standalone dial-out terminal used for your card-present transactions connected to the Internet or any other network?

Yes No

Q16: Do you enter credit card data into a computer system or virtual terminal for your card-present transactions?

Yes No

Q17: Are your card-present transactions processed using a virtual payment terminal accessed through a web browser?

Yes No

Questionnaire Results

Contact
About
Privacy Policy
Disclaimer
PCI DSS Training

Scroll to Top